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(57) Abstract: There is provided an encryption/decryption device 
achieving a safe encryption communication by performing an ap- 
propriate padding to a method such as an NTRU encryption method. 
An n-bit plain text M is received and subjected to OAEP+ padding. 
The result is subjected to a conversion A satisfying the following 
condition so as to obtain two bit strings m and r. The conversion 
A is mapping for correlating elements L m * 1^. to a bit string of k 
bits or below. When L^ represents a range of m and L r represents 
a range of r, the next condition should be satisfied: the mapping is 
an injection; A and its inverse mapping can be calculated by poly- 
nomial time; when the encryption function is E(m, r), the mapping 
E:A(X) — »L e is a uni -directional function. The X represents a range 
of (m, r) and L c represents a space of the entire encrypted text Af- 
ter division into m and r, c = E r (m) is calculated and encrypted and 
the e is transmitted to a receiver of the encrypted text. 
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